Android App Reverse Engineering 101 : Tools And Functions

Android App Reverse Engineering 101 is a comprehensive workshop designed to introduce learners to the fundamentals of reverse engineering Android applications.

This workshop focuses on static analysis, which involves examining an application’s code without executing it.

The tools used in this workshop are crucial for understanding and analyzing Android apps, particularly for those interested in security, development, or research.

Key Tools Used

1. jadx:
   • Function: jadx is a powerful Android decompiler that converts Dalvik bytecode (.dex files) back into Java source code. This allows users to analyze and understand the logic of an Android app by examining its decompiled code.
   • Features: It includes features like syntax highlighting, code navigation, and a deobfuscator to help with obfuscated code.
2. Ghidra:
   • Function: Ghidra is a software reverse engineering tool developed by the NSA. It is used for analyzing native libraries in Android apps, which are typically written in C or C++.
   • Features: Ghidra supports disassembly and decompilation of binary files, allowing users to convert low-level assembly code into higher-level languages like C or C++. It supports various architectures and is widely used in malware analysis and vulnerability research.

Workshop Environment

The workshop provides a virtual machine (VM) environment based on Ubuntu 18.04, which includes both jadx and Ghidra.

This setup allows learners to practice reverse engineering exercises without needing to install these tools on their own systems.

The workshop includes several exercises that cover:

• DEX Bytecode Analysis: Learners use jadx to analyze and understand the Java code of Android apps.
• Native Library Analysis: Ghidra is used to analyze native libraries, which are crucial for understanding performance-intensive parts of an app.
• Obfuscation Techniques: Exercises also cover how to deal with obfuscated code, which is often used to protect app logic from reverse engineering.

By completing these exercises, learners gain a solid foundation in reverse engineering Android apps, enabling them to apply these skills to various fields such as app security, development, and research.